People Picker

The "People Picker" functionality is automatically available to every delegated manager with the role DelegatedManager_User. With the People Picker, existing eIAM identities can be searched in the enterprise context, onboarded directly in the access client and then authorised by the delegated manager. Without the need for an invitation process. The search for eIAM accounts is only possible with a fully qualified e-mail address. No wildcards are allowed for the search. The search results screen shows the delegated manager a list of search results including the identity type. The desired identity can be selected from the list. The user will then receive a mail notification "Your account has been created" with the login method i.e. FED-LOGIN or CH-LOGIN which must be used to access the application.

The "People Picker" supports the following identity types:

  • Employees (internal/external) of the central and decentralised Federal Administration (CIS-BV / CIS-OTHERS) - Authenticated via FED-LOGIN
  • Employees of the cantonal and communal administrations (equipped with SG-PKI Smart Card) (CIS-KTV) - Authenticated via FED-LOGIN
  • External, affiliates of the Federal Administration who have not been onboarded via HR processes (nHEC+) - Authenticated via CH-LOGIN
Options:
No use of People Picker in Access Client (opt-out)
  • The "People Picker" is available by default in all Access Clients of eIAM that use delegated management. Persons responsible for Access clients can request that the function is globally switched off on their client.
    • In this case, the function is not displayed to the delegated managers.
  • The "People Picker" allows searching across all email domains by default. Domain managers can request that the search for identities from this domain be globally prevented (blacklisting).
    • The delegated manager will receive an appropriate error message when searching for an identity with an e-mail address in such a domain.